Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fRNi1-0005xU-4L for pgsql-admin@arkaria.postgresql.org; Fri, 08 Jun 2018 20:10:05 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fRNhz-0007ZC-J2 for pgsql-admin@arkaria.postgresql.org; Fri, 08 Jun 2018 20:10:03 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fRNhz-0007Z2-2k for pgsql-admin@lists.postgresql.org; Fri, 08 Jun 2018 20:10:03 +0000 Received: from mail-qk0-x243.google.com ([2607:f8b0:400d:c09::243]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1fRNhu-0004fH-NO for pgsql-admin@lists.postgresql.org; Fri, 08 Jun 2018 20:10:01 +0000 Received: by mail-qk0-x243.google.com with SMTP id d130-v6so9529069qkc.2 for ; Fri, 08 Jun 2018 13:09:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=2ndquadrant-com.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:mime-version:content-disposition :content-transfer-encoding:in-reply-to:user-agent; bh=8adh2rdDKGtIG4Ds1zvUCzQi8bthtzJRC5a1Tu2EgZw=; b=M/IcLpQJfWLdDrtL7IJrvuwB+c9ySiWuolyu8KIkdfMCJpLCwdcXBih8wSbMNIqAJR winPuZ8JqW+pLdHEBz2X+VItGPrkEu7kAp79BMUvL5FOKjnlwuw54WNkwLEM1bli48Go IowWS1QnU1G4p1ZdguLSQHzi9I2mehaeTUVf8CGzuuf6DBGOJjSShou7rujFFR9iNyrk jSF7Fs03EC5OWJFFgZSAjw7SSEy4cBdj1QDDsUHhKyi1b2sUKgly6Ed5F9i/WFzTUOSC vwpwyD6plR9qiRxigmxjtIemNxRmWF/qLhu/leMM0kMeNEn4i2Z4P0vSORpnPx9Mfznp nXEg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=8adh2rdDKGtIG4Ds1zvUCzQi8bthtzJRC5a1Tu2EgZw=; b=Q/TNwqtGIfBxHyR0GOhI9YI+fSnqUCZ+WOnbDQFQmiTF8wTcx0TWg+bJ3oysQcDf5+ L5yD6IR7yHCWlOAzj+bQ0OfSdLQ0xe1tJO/NInYoESwVj1TW1yZQcUfh0x7Szh+nY2ZN Zw+3Wk0O54/rlzZQE5Aq/RVbC/n86x8Onx2XTWRuIdKd6g4w2vMUrFfNOEk3TAstr63s xb0MJzHBZMPSf300AMHUWVPX5EA/h15P95hBywFgiQDaL+QVHgH0NjTIeaGVD7YLMkE1 HG/eo7z5Ps+9x2OORf2VkmURENT3WQ6LIAai0B6/5JMzV0GNTcJRY1Ml6CvXAErhRjQt WWNQ== X-Gm-Message-State: APt69E2OQh5VxtJIt4ZYU0vuTsb351qOJZv1FvTEh6x4L7TzPXNOgt9n NPUw0+MAfM+FoRna51yr9q4/PQ== X-Google-Smtp-Source: ADUXVKLQi+72ERvWSdU9I3lipTKoEnM+fiTftKx/fKvNKEwYajeGhzIg2MrmB/9syF/bVWsT2kN0yA== X-Received: by 2002:a37:4147:: with SMTP id o68-v6mr6744108qka.227.1528488597282; Fri, 08 Jun 2018 13:09:57 -0700 (PDT) Received: from alvin.alvh.no-ip.org ([190.217.216.192]) by smtp.gmail.com with ESMTPSA id o25-v6sm4000968qtp.72.2018.06.08.13.09.56 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 08 Jun 2018 13:09:56 -0700 (PDT) Received: by alvin.alvh.no-ip.org (Postfix, from userid 1000) id 6124D478; Fri, 8 Jun 2018 16:09:54 -0400 (-04) Date: Fri, 8 Jun 2018 16:09:54 -0400 From: Alvaro Herrera To: Miguel Angel Sanchez Sandoval Cc: pgsql-admin@lists.postgresql.org, pgsql-general@lists.postgresql.org Subject: Re: Performance problem postgresql 9.5 Message-ID: <20180608200954.ktjpp6hs6orkvvdg@alvherre.pgsql> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: NeoMutt/20170306-137-4415bd-dirty (1.8.0) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On 2018-Jun-08, Miguel Angel Sanchez Sandoval wrote: > Hi guys, migrate from 8.4 to 9.5, all OK except that 2-3 days pass and the > database experiences slowness, I execute the linux top command and it shows > me a postgres user process executing a strange command (2yhdgrfrt63788) > that I consume a lot of CPU, I see the querys active and encounter select > fun ('./ 2yhdgrfrt63788') , this did not happen in version 8.4, any help > would appreciate it. Hmm, has your database been compromised? You may have an intruder there -- beware. -- Álvaro Herrera https://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services